Two screenshots are shown in the exhibit.

The Vault UI hides or denies access to sections that the current token cannot use. ACL policy management is controlled by Vault policies, usually through access to policy-related system paths. If the authenticated token does not have the required permissions to list, read, create, or update policies, the UI will not expose the ACL Policies menu as expected. There is no separate “policy engine” that must be enabled; policies are a core Vault authorization mechanism. Option C is also incorrect because the issue is not solved by moving to a “policy namespace” unless the token has the required permissions in that namespace. The exhibit behavior is a permissions problem. HashiCorp documents that Vault access is controlled by policies and that unauthorized paths evaluate to deny.

================